Description
Advantech EKI-1524, EKI-1522, EKI-1521 devices through 1.21 are affected by a Stored Cross-Site Scripting vulnerability, which can be triggered by authenticated users in the ping tool of the web-interface.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Advantech | EKI-1524 | ≤ 1.24 | — |
| Advantech | EKI-1522 | ≤ 1.24 | — |
| Advantech | EKI-1521 | ≤ 1.24 | — |
Advisories 1
- ICSA-23-269-04 Advantech EKI-1524-CE series CISA ICS & IT advisories · Sep 26, 2023